Banking system controlled responsive to data bearing records

ABSTRACT

An automated banking machine operates responsive to data read from data bearing records to cause financial transfers. The machine includes a card reader that operates to read card data from user cards. The card data corresponds to financial accounts. The automated banking machine includes a cash dispenser and the machine carries out transaction functions for consumers including dispensing cash. The machine may be configured such that when an alternative bootable media is detected, the computer is operative to prompt a user to input a bios boot password.

CROSS REFERENCE TO RELATED APPLICATIONS

This Application is a divisional of co-pending application Ser. No.10/620,911 filed Jul. 15, 2003. Application Ser. No. 10/620,911 claimsbenefit pursuant to 35 U.S.C. §119(e) of Provisional Application60/396,607 filed Jul. 16, 2002.

TECHNICAL FIELD

This invention relates to automated banking machines that operateresponsive to data read from user cards and which may be classified inU.S. Class 235, Subclass 379.

BACKGROUND ART

Automated banking machines may include a card reader that operates toread data from a bearer record such as a user card. The automatedbanking machine may operate to cause the data read from the card to becompared with other computer stored data related to the bearer. Themachine operates in response to the comparison determining that thebearer is an authorized system user to carry out at least onetransaction which is operative to transfer value to or from at least oneaccount. A record of the transaction is also commonly printed throughoperation of the automated banking machine and provided to the user.Automated banking machines may benefit from improvements.

OBJECTS OF EXEMPLARY EMBODIMENTS

It is an object of an exemplary embodiment to provide an automatedbanking machine at which a user may conduct transactions.

It is a further object of an exemplary embodiment to provide anautomated banking machine that is more resistant to being attacked by anunauthorized user.

It is a further object of an exemplary embodiment to provide anautomated banking machine that may boot from different devices.

It is a further object of an exemplary embodiment to provide anautomated banking machine that is operative to prevent an unauthorizeduser from using a portable bootable media to access the computer of themachine.

Further objects of exemplary embodiments will be made apparent in thefollowing Detailed Description of Exemplary Embodiments and the appendedclaims.

Automated banking machines are well known. A common type of automatedbanking machine used by consumers is an automated teller machine(“ATM”). ATMs enable customers to carry out banking transactions. Commonbanking transactions that may be carried out with ATMs include thedispensing of cash, the receipt of deposits, the transfer of fundsbetween accounts, the payment of bills and account balance inquiries.The type of banking transactions a customer can carry out are determinedby capabilities of the particular machine and the programming of theinstitution operating the machine. Other types of automated bankingmachines may allow customers to charge against accounts, to pay bills,to transfer funds or to cash checks. Other types of automated bankingmachines may print or dispense items of value such as coupons, tickets,wagering slips, vouchers, checks, food stamps, money orders, scrip ortravelers checks. For purposes of this disclosure references to an ATM,an automated banking machine or automated transaction machine shallencompass any device which carries out transactions including transfersof value.

Some hardware settings of a computer of an ATM may be configured througha basic input/output system (BIOS) program. The BIOS program enables auser to modify the hardware settings stored in a ROM or flash memorychip of the ATM computer. Such hardware settings may configure thedisplay screen, disk drives, keyboard, serial communications, and otherhardware devices and functions of the ATM computer.

ATMs generally include a computer and a plurality of bootable storagedevice drives in operative connection with the computer. Such bootablestorage device drives may include, for example, a hard drive, a floppydisk drive, and a CD-ROM drive. The computer of the ATM may be operativeto boot up or load an operating system responsive to the bootinformation or boot record read from the bootable media associated withany one of these storage device drives. Such a boot record generallyinstructs the computer as to where to find an operating system or otherprogram to boot. The hardware settings configured with a BIOS of an ATMcomputer may specify which storage device drives to attempt to bootfrom. In addition, the hardware settings configured with a BIOS of anATM computer may specify the particular order of storage device drivesto attempt to boot from. For example, an order of bootable storagedevice drives configured in a BIOS of an ATM computer may include: 1)the floppy disk drive; 2) the CD-ROM drive; and 3) the hard drive.Responsive to such a boot order, the ATM may first attempt to boot froma floppy disk bootable media within the floppy disk drive. If a floppydisk bootable media is not located in the floppy disk drive, the ATMresponsive to the boot order may attempt to boot from a CD-ROM bootablemedia in the CD-ROM drive. If the CD-ROM bootable media is not locatedin the CD-ROM drive, the ATM responsive to the boot order may attempt toboot from the hard drive bootable media.

This behavior of trying to boot from different bootable media responsiveto a specified order of bootable media and/or their respective storagedevice drives set in a BIOS may be useful to an authorized userattempting to service an ATM. For example, if a new hard drive of an ATMis installed, an installation of a new operating system on the new harddrive can be initiated by booting from a setup floppy disk, CD-ROM, orother portable bootable media. Unfortunately, this booting behavior ofan ATM computer can have negative consequences. For example, if thesetup CD-ROM is accidently left in the CD-ROM drive, the next time theATM is restarted the ATM may load the setup program from the CD-ROMrather than loading the terminal control software from the hard drive.

In addition, although many ATMs include the computer in a secure safe orchest of the ATM, other ATMs may include the computer outside the chest.Although such a computer outside the chest may still be located behind alocked enclosure or fascia, such an enclosure is often significantlyless secure than a chest. As a result, an unauthorized user may be ableto open the enclosure to access the ATM computer. An unauthorized userwho gains access to the CD-ROM drive or floppy disk drive, could inserta CD-ROM or floppy disk with malicious software. If the BIOS isconfigured to boot the ATM computer from the CD-ROM drive and/or floppydisk drive prior to booting from the hard drive, the unauthorized usermay be able to load the malicious software in the computer of the ATM.Such malicious software could be in the form of a virus or worm that isoperative to cause the ATM to dispense cash. Such malicious softwarecould also be in the form of a sniffer program which intercepts secretinformation, such as account numbers, and reports the information to theunauthorized user.

Consequently, there exists a need for an automated banking machine thatis more secure. There further exists a need for an automated bankingmachine that is more resistant to being attacked by an unauthorizeduser. In addition, there exists a need for an automated banking machinethat is operative to prevent an unauthorized user from using portablebootable media to access the computer of a machine.

The foregoing objects may be accomplished in an exemplary embodiment byan automated banking machine, ATM or other automated transactionfunction machine, which includes output devices such as a display screenand receipt printer. The machine may further include input devices, suchas a touch screen, keyboard, keypad, function keys and card reader. Inaddition, the automated banking machine may include a plurality ofstorage device drives, such as a hard drive, floppy disk drive andCD-ROM drive. The automated banking machine may further includetransaction function devices, such as a cash dispenser mechanism forsheets of currency, a depository mechanism and other transactionfunction devices which are used by the machine in carrying out bankingtransactions, including transfers of value.

In the exemplary embodiment, the automated banking machine may includeat least one computer. The computer may be in operative connection withthe output devices, the input devices and the storage device drives, aswell as with the cash dispenser mechanism, depository mechanism andother physical transaction function devices in the banking machine. Thecomputer may further be operative to communicate with a host systemlocated remotely from the machine.

In the exemplary embodiment, the computer may include software programsthat are executable therein. The software programs of the automatedbanking machine may be operative to cause the computer to output userinterface screens through a display device of the machine. The userinterface screens may include consumer screens which provide a consumerwith information for performing consumer operations, such as bankingfunctions, with the machine. The user interface screens may furtherinclude service screens which provide an authorized user servicing themachine with information for performing service and maintenanceoperations with the machine. In addition, the machine may furtherinclude software programs operative in the computer for controlling andcommunicating with hardware devices of the machine, including thetransaction function devices.

In one exemplary embodiment, the computer of an automated bankingmachine, such as an ATM, may include a BIOS program that is operative toconfigure hardware settings of the computer. Such a BIOS configurationmay be stored in a ROM, flash memory or other nonvolatile memory of thecomputer. When the computer of the ATM is started or is restarted, thecomputer is operative to boot responsive to the BIOS. In an exemplaryembodiment, the BIOS program may include a BIOS program password. Toload the BIOS program to make changes to the BIOS configuration, theBIOS may be operative to prompt a user to input the BIOS programpassword through an input device of the machine. If the inputtedpassword matches a BIOS program password stored in the BIOS, the BIOSprogram is operative to enable the user to make changes to the BIOSconfiguration. Such changes may include changing the boot sequence ofthe bootable storage device drives of the ATM. Such changes may alsoinclude changing the BIOS program password to a different password.

In the exemplary embodiment, the computer of the ATM may include atleast one boot password stored in the BIOS, which is required to beinputted by a user prior to booting one or more storage device drives ofthe ATM. In addition, the computer may be operative to specify in theBIOS which of the storage device drives corresponds to a default storagedevice drive, which does not require the input of the boot passwordstored in the BIOS, and which of the storage device drives correspond toalternative storage device drives which require the input of the bootpassword. When the computer of the ATM detects a bootable media in oneof the alternative storage device drives, the computer is operative toprompt a user to input the boot password. If the user inputs a passwordwhich corresponds to the boot password stored in the BIOS, then the ATMcomputer may boot responsive to the boot record on boot media in thealternative storage device drive.

In the exemplary embodiment, if a password is not entered within apredetermined period of time, or an incorrect password is entered atleast once, the computer is operative to automatically boot responsiveto the boot record of the boot media of the default storage devicedrive. However, in alternative exemplary embodiments, when the computerdetects that there is a second alternative bootable media, then afterthe predetermined period of time has elapsed for the first alternativebootable media, the computer may prompt the user to enter a password forthe second alternative bootable media. In an exemplary embodiment, whenthe computer of the ATM determines that no bootable media is located inany of the alternative storage device drives, the ATM computer isoperative to automatically boot responsive to a boot record on thebootable media of the default storage device drive specified in theBIOS, without requiring a user to input the boot password.

In an exemplary embodiment, the order for booting from the storagedevice devices may correspond to a boot order that is specified in theBIOS. In exemplary embodiments, all alternative storage device drivesmay require the same boot password. In alternative exemplaryembodiments, each alternative storage device drive may be associatedwith its own password stored in the BIOS, which may be different foreach alternative storage device drive.

BRIEF DESCRIPTION OF DRAWINGS

FIG. 1 is a perspective view representative of an exemplary embodimentof an automated banking machine.

FIG. 2 is a schematic view of an exemplary embodiment of an automatedbanking machine.

FIG. 3 shows an exemplary embodiment of a BIOS configuration screen.

FIG. 4 shows a further exemplary embodiment of a BIOS configurationscreen.

FIG. 5 shows a further exemplary embodiment of a BIOS configurationscreen.

DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS

Referring now to the drawings and particularly to FIG. 1, there is showntherein a perspective view of an exemplary embodiment of an automatedbanking machine 10. Here the automated banking machine 10 may include atleast one output device 34 such as a display device 12. The outputdevice 12 may be operative to provide a consumer with a user interface18 that may include a plurality of screens or other outputs includingselectable options for operating the machine. The exemplary embodimentmay further include other types of output devices such as a receiptprinter 20, statement printer 21, speakers, or any other type of devicethat is capable of outputting visual, audible, or other sensoryperceptible information.

The exemplary embodiment of the automated banking machine 10 may includea plurality of input devices 32 such as an encrypting pin pad (EPP) withkeypad 16 and function keys 14 as well as a card reader 22 and/or barcode reader 23. The exemplary embodiment of the machine 10 may furtherinclude or use other types of input devices, such as a touch screen,microphone, or any other device that is operative to provide the machinewith inputs representative of user instructions or information. Themachine may also include one or more biometric input devices such as afingerprint scanner, an iris scanner, facial recognition device, handscanner, or any other biometric reading device which may be used to reada biometric input that can be used to identify a user.

The exemplary embodiment of the automated banking machine 10 may furtherinclude a plurality of transaction function devices which may includefor example a cash dispenser 24, a depository mechanism 26, a cashrecycler mechanism, or any other type of device which is operative toperform transaction functions involving transfers of value.

FIG. 2 shows a schematic view of components which may be included in theautomated banking machine 10. The machine 10 may include at least onecomputer 30. The computer 30 may be in operative connection with theinput device(s) 32, the output device(s) 34 and the transaction functiondevice(s) 36. The exemplary embodiment may further include softwarecomponents 40 that are operative in the computer 30. Such softwarecomponents may include an operating system 46 and at least one terminalcontrol software component 48. The terminal control software components48 may be operative to control the operation of the machine by both aconsumer and an authorized user, such as a service technician. Forexample, such terminal control software components may includeapplications which enable a consumer to dispense cash, deposit a checkor perform other transaction functions with the machine. In addition,the terminal control software components may include applications whichenable a service technician to perform configuration, maintenance anddiagnostic functions with the machine.

Exemplary embodiments of the automated banking machine 10 are operativeto communicate with a transaction processing server, which is referredto herein as an ATM host banking system 42. Such an ATM host bankingsystem 42 is operative to authorize the automated banking machine 10 toperform transaction functions for users, such as withdrawing cash froman account through operation of the cash dispenser 24, depositing checksor other items with the depository mechanism 26, performing a balanceinquiry for a financial account and transferring value between accounts.

Exemplary embodiments of the automated banking machine 10 may include aplurality of storage device drives 44 in operative connection with thecomputer. Examples of storage device drives 44 include a hard drive 60,floppy disk drive 62, CD drive 64, DVD drive 66, Iomega ZIP® drive 68and a bus/port device 70, such as a USB hard drive. In an exemplaryembodiment, at least two of the storage device drives are bootable. Asdefined herein, a bootable device includes or may include at least onebootable media which includes a boot record. The boot record may includeinformation which is used to boot an operating system. In an exemplaryembodiment, the computer may be operative to boot an operating systemresponsive to the boot record of a bootable media of a storage devicedrive. For a floppy disk drive 62, such bootable media may include afloppy disk. For a CD drive 64, such bootable media may include a CD.For a hard drive device 60, the bootable media may correspond to theinternal platters within the hard drive.

In an exemplary embodiment, the hard drive 60 of the machine may includea copy of the operating system 46 and the terminal control softwarecomponents loaded therein. A boot record for the hard drive 60 mayinclude information in a first sector of the hard drive, which causesthe computer to run the operating system 46 installed on the hard drive.

Exemplary embodiments of the computer 30 of the automated bankingmachine may include a BIOS 50. The BIOS 50 may include configurationinformation 50 associated with the operation of the computer. Suchconfiguration information 50 may be stored in a ROM, flash memory deviceor other non-volatile memory of the computer. The BIOS 50 may alsoinclude a BIOS setup program 54, which enables a user to modify theconfiguration information. The computer 50 may be operative to executethe BIOS setup program responsive to at least one input to an inputdevice of the machine. Such an input may include pressing one or morekeys of the keyboard when the computer of the machine is initiallystarted or restarted.

When the automated banking machine includes more than one storage devicedrive, the computer may determine which storage device drive 44 to bootfrom, responsive to the BIOS configuration information. FIG. 3 shows anexample of a BIOS user interface screen 100, which may be provided bythe computer through a display device of the automated banking machineresponsive to the BIOS setup program. The BIOS screen 100 may enable auser to modify the BIOS configuration saved in the BIOS.

In an exemplary embodiment, the BIOS configuration may include bootorder information 102. The boot order information 102 may specify theorder of the storage device drives in which the computer may attempt toboot from. In this described exemplary embodiment, the computer may beoperative responsive to the order 102 to attempt to boot from the firstdrive listed in the boot order 102, which in this example includes afloppy disk drive 104. If a floppy disk is not present in the floppydisk drive 104, then the computer may be operative responsive to theboot order 102 to attempt to boot from the next drive on the list, whichin this example includes a CD drive 106. If a CD is not present in theCD drive 106, then the computer may be operative responsive to the bootorder 102 to attempt to boot from the next drive on the list, which inthis example includes a hard drive 108.

In an exemplary embodiment, a bootable floppy disk or CD may include anoperating system and at least one service software, such as a diagnosticutility, setup program or other application, which an authorized usermay require to service and maintain the machine. When such a bootablefloppy disk, or CD bootable media, is inserted into the correspondingfloppy disk drive or CD drive, the computer may be operative responsiveto the boot order to execute the operating system and service softwarefrom the floppy disk or CD, rather than executing an operating systemand terminal control software from the hard drive. If no bootable floppydisk or CD bootable media is inserted into the corresponding floppy diskor CD drive, the computer may be operative responsive to the boot orderto execute the operating system and terminal control software from thehard drive.

In an exemplary embodiment, the BIOS configuration may include a bootpassword 110 which may be modified by a user using the BIOS screen 100.In an exemplary embodiment, when the computer of the machine isinitially started or restarted, the computer responsive to the BIOS mayrequire a user to input a password which corresponds to the bootpassword 110 stored in the BIOS. To prevent an unauthorized user frommodifying the BIOS to remove or change the password, the BIOS programmay require a user to input the boot password 110 prior to beingprovided a BIOS screen 100, which is capable of modifying the bootpassword 110. As shown in FIG. 4, in exemplary embodiments, the BIOSconfiguration may also have a specific BIOS program password 112, inaddition to a boot password 110. The BIOS program password 112 may beused by the computer to restrict access to the BIOS screen 100, whereinas the boot password 110 may be used to restrict access to the bootingof an operating system from one or more storage device drives.

In an exemplary embodiment of the automated banking machine, thecomputer of the machine responsive to the BIOS may be operative toautomatically boot from the particular storage device drive, such as ahard drive, which includes the main operating system and terminalcontrol software components, without requiring a boot password to beentered. However, when a portable bootable media, such as a floppy diskor CD, is present in one of the other storage device drives, thecomputer responsive to the BIOS may require the BIOS password to beinputted through at least one input device of the machine prior tobooting from the portable bootable media.

In one exemplary embodiment, to distinguish between the default storagedevice drive which does not require a boot password and the alternativestorage device drives which require a boot password, the BIOSconfiguration may specify which of the storage device drives does notrequire a password and/or which of the storage device drives require aboot password.

As shown in FIG. 4, in an exemplary embodiment, the BIOS configurationmay include a default boot device 114, which specifies which of theplurality of storage device drives in the machine corresponds to thedefault boot device which does not require a boot password. As shown inFIG. 5, in an alternative exemplary embodiment, the BIOS configurationmay enable a user to specify for each storage device drive, whether ornot the device is associated with a boot password. In this describedexemplary embodiment, a BIOS user screen 100, for example, may enable auser to input a different password 116 for each different storage devicedrive 118. The storage device drive 120 which is not associated with aspecific password may correspond to the previously described defaultstorage device drive.

Responsive to the previously described BIOS configuration, a computer ofthe automated banking machine may be operative to boot according to thefollowing described method. When the automated banking machine is beinginitially started or restarted, the computer of the ATM may detectwhether a bootable media is present in any one of the storage devicedrives which require, as specified in the BIOS, a boot password. Suchstorage device drives may, for example, correspond to portable storagedevice drives, such as a floppy disk drive or CD drive or any otheralternative storage device drive which, as specified in the BIOS,requires a boot password.

When a bootable media is detected in an alternative storage devicedrive, the computer is operative to prompt at least once for a user toinput a password, which corresponds to the boot password stored in theBIOS of the computer. Such a prompt may include an output through adisplay device, or an other output device of the machine, which isindicative of a request to input the boot password through one of theinput devices of the machine.

Once a password is inputted by the user, the computer of the machine isoperative to determine whether the inputted password corresponds to theboot password stored in the BIOS of the computer. If the inputtedpassword does not match the boot password, the computer may be operativeto provide the user with one or more additional chances to input thecorrect password. However, if after a predetermined number of tries, theuser is unable to input a correct password, the computer is operativeresponsive to the BIOS to boot from the bootable media of the defaultstorage device drive, which is specified in the BIOS as not requiring apassword.

In addition, if the computer of the machine detects that a predeterminedamount of time has elapsed after the prompt for the password without apassword being input through at least one input device of the machine,the computer is also operative responsive to the BIOS to boot from thebootable media of the default storage device drive, which is specifiedin the BIOS as not requiring a password. When the computer doesdetermine that the inputted password corresponds to the boot passwordstored in the BIOS, the computer is operative to boot from thealternative storage device drive. In the exemplary embodiment, when thecomputer determines that no alternative storage device drive includes abootable media, the computer may be operative responsive to the BIOS toattempt to boot from the bootable media of the default storage devicedrive, which is specified in the BIOS as not requiring a password.

In exemplary embodiments, where the BIOS includes a boot order, thecomputer is operative to follow that order in determining whichalternative storage device drive to boot from. For example, if both thefloppy disk drive includes a bootable floppy disk and the CD driveincludes a bootable CD, the computer may be operative responsive to theboot order in the BIOS to determine which drive to attempt to boot tofirst. As shown in FIG. 3, when the floppy disk drive 104 is listedbefore the CD drive 106, and the boot password is inputted correctly,the computer may be operative to boot from the floppy disk and not theCD. In this described exemplary embodiment, only when the computerdetects that the first listed storage device drive does not include abootable media will it then check to see if a second listed storagedevice drive, such as a CD drive 106, includes a bootable CD. If thecomputer determines that no alternative storage device drive includes abootable media, the computer may then boot from the bootable media ofthe default storage device drive, which is specified in the BIOS as notrequiring a password.

In exemplary embodiments of the BIOS which include a boot order, it maybe possible for the default storage device drive to be listed ahead ofany alternative storage device drives. In such cases, if the defaultstorage device drive is detected by the computer, the computer mayautomatically boot from the default storage device drive withoutrequiring a password regardless of whether a bootable media is insertedin one or more of the alternative storage device drives.

As used herein, booting responsive to a storage device drive correspondsto booting responsive to a boot record stored on the bootable media thatis in the storage device drive. Such a boot record may correspond to amaster boot record or a partition table stored in the first sector ofthe bootable media for example. With storage device drives, such as afloppy disk drive or a CD drive, the boot record is located on a portionof a portable and removable bootable media, such as a floppy disk or CD.With storage device drives, such as a hard disk, the boot record isstored on a portion of a bootable media, which may or may not beportable and removable. For example, with some hard drives, the harddrive may be securely mounted to the interior of the machine and thebootable media of the hard drive may correspond to the non removableplatters located within the hard drive housing. However, in otherexemplary embodiments the hard drive may be portable. For example, harddrives, such as an Iomega JAZ® drive, may have platters located within aportable cartridge which may be removably connected to the IOMEGA JAZdrive.

In other exemplary embodiments, the hard drive may be in operativeconnection with a USB, PCMCIA or other bus/port interface connector.With such devices, the storage device drive may correspond to the USB orPCMCIA or other bus/port interface of the computer, and the hard drive,with the interface connector, may correspond to the bootable media.Thus, as used herein, the bootable media corresponds to any componentwhich is operative to store a boot record thereon, which a computer maybe operative responsive thereto to boot an operating system and/or othersoftware. A storage device drive, as used herein, corresponds to anyhardware component of the automated banking machine which the computermay use to read the boot record from the bootable media.

It is to be understood that the bootable media, which includes a bootrecord, may or may not include all or any portion of the operatingsystem, which is loaded by the computer responsive to the boot record.For example, the boot record may specify that the computer boot anoperating system located on a different storage device drive, such as asecond hard drive. Also, the boot record may point to a boot loaderprogram, such as LILO or GRUB, which is installed on one of the storagedevice drives. Such a boot loader may cause the computer to output auser interface, which enables a user to select from a plurality ofdifferent operating systems or configurations of operating system toboot from.

Computer software used in operating the automated transaction machinesand connected computers, may be loaded from articles or computerreadable media of various types into the respective computers. Suchcomputer software may be included on and loaded from one or morearticles, such as diskettes or compact disks. Such software may also beincluded on articles such as hard disk drives, tapes or read only memorydevices. Other articles, which include data representative of theinstructions for operating computers in the manner described herein, aresuitable for use in achieving operation of transaction machines andsystems in accordance with exemplary embodiments.

In exemplary embodiments, the articles or computer readable media mayinclude flash software files which, when executed by the computer of themachine, may be operative to update the BIOS of the computer, with anexemplary embodiment of a BIOS described herein.

The exemplary embodiments of the automated banking machines and systemsdescribed herein have been described with reference to particularsoftware components and features. Other embodiments of the invention mayinclude other or different software components which provide similarfunctionality.

Thus, the new automated banking machine system and method achieves oneor more of the above stated objectives, eliminates difficultiesencountered in the use of prior devices and systems, solves problems andattains the desirable results described herein.

In the foregoing description certain terms have been used for brevity,clarity and understanding, however no unnecessary limitations are to beimplied therefrom because such terms are used for descriptive purposesand are intended to be broadly construed. Moreover, the descriptions andillustrations herein are by way of examples and the invention is notlimited to the exact details shown and described.

In the following claims, any feature described as a means for performinga function shall be construed as encompassing any means known to thoseskilled in the art to be capable of performing the recited function, andshall not be limited to the features and structures shown herein or mereequivalents thereof. The description of the exemplary embodimentincluded in the Abstract included herewith, shall not be deemed to limitthe invention to features described therein.

Having described the features, discoveries and principles of theinvention, the manner in which it is constructed and operated, and theadvantages and useful results attained; the new and useful structures,devices, elements, arrangements, parts, combinations, systems,equipment, operations, methods and relationships are set forth in theappended claims.

1. Apparatus comprising: an automated banking machine that operatesresponsive to data read from data bearing records to cause financialtransfers, including: a card reader operative to read card data on usercards corresponding to financial accounts; a cash dispenser; at leastone input device operative to receive manual user inputs; at least onecomputer including a BIOS, wherein the at least one computer is inoperative connection with the card reader, the cash dispenser and the atleast one input device, wherein the BIOS includes a BIOS boot password,and wherein the BIOS specifies a default bootable media which does notrequire a boot password, wherein the at least one computer is operativeto detect a connection of a portable bootable media with the at leastone computer; a storage device drive in operative connection with the atleast one computer, wherein the storage device drive corresponds to thedefault bootable media specified in the BIOS, wherein when the at leastone computer detects the connection of the portable bootable media, theat least one computer is operative to require input of at least onemanual input that corresponds to the BIOS boot password through the atleast one input device prior to booting responsive to a boot recordassociated with the portable bootable media, wherein when the computerdoes not detect a connection of a portable bootable media, the at leastone computer is operative to boot responsive to a boot record on thespecified default bootable media without requiring user input of theBIOS boot password.
 2. The apparatus according to claim 1, wherein whena connection of the portable bootable media is detected by the at leastone computer and when at least one manual input corresponding to theBIOS boot password has not been provided through the at least one inputdevice within a predetermined amount of time, the at least one computeris operative to automatically boot responsive to the boot recordassociated with the default bootable media.
 3. The apparatus accordingto claim 1, wherein when a connection of the portable bootable media isdetected by the at least one computer and when a manual input of atleast one password provided through the at least one input device doesnot correspond to the BIOS boot password, the at least one computer isoperative to automatically boot responsive to the boot record associatedwith the default bootable media.
 4. The apparatus according to claim 1,wherein the storage device drive includes a hard drive mounted within ahousing of the automated banking machine.
 5. The apparatus according toclaim 4, further comprising a further storage device drive in operativeconnection with the at least one computer in the housing of theautomated banking machine, wherein the further storage device drive isoperative to read the boot record from the portable bootable media. 6.The apparatus according to claim 5, wherein the portable bootable mediaincludes a floppy disk.
 7. The apparatus according to claim 5, whereinthe portable bootable media includes a CD.
 8. The apparatus according toclaim 5, wherein the portable bootable media includes a DVD.
 9. Theapparatus according to claim 1, wherein the at least one computerincludes a USB port, wherein the at least one computer is operative todetect a connection of a portable bootable media to the USB port. 10.The apparatus according to claim 9, wherein the portable bootable mediaincludes a portable hard drive.
 11. The apparatus according to claim 1,wherein the at least one computer includes a BIOS setup program, whereinthe at least one computer is operative to require input through the atleast one input device of at least one manual input that corresponds tothe BIOS boot password to enable access to modify the BIOS through theBIOS setup program.
 12. The apparatus according to claim 1, wherein theat least one computer includes a BIOS setup program and a BIOS programpassword, wherein the at least one computer is operative to requireinput through the at least one input device of at least one manual inputcorresponding to the BIOS program password to enable access to modifythe BIOS with the BIOS setup program, wherein the BIOS program passworddoes not correspond to the BIOS boot password.
 13. The apparatusaccording to claim 1, wherein when the at least one computer has bootedresponsive to the boot record of the default bootable media, the atleast one computer is operative to cause the cash dispenser to dispensecash responsive at least in part to at least one further manual inputthrough the at least one input device.
 14. Apparatus comprising: anautomated banking machine that operates responsive to data read fromdata bearing records to cause financial transfers, including: a cardreader operative to read card data on user cards corresponding tofinancial accounts; at least one transaction function device that isoperative to at least one of receive and dispense at least one of cashand checks; at least one input device operative to receive manual userinputs; at least one computer including a BIOS, wherein the at least onecomputer is in operative connection with the card reader, the at leastone transaction function device, and the at least one input device,wherein the BIOS includes a boot password, and wherein the BIOSspecifies a default bootable media which does not require a bootpassword, wherein the at least one computer is operative to detect aconnection of a portable bootable media with the at least one computer;a storage device drive in operative connection with the at least onecomputer, wherein the storage device drive corresponds to the defaultbootable media specified in the BIOS, wherein when the at least onecomputer detects the connection of the portable bootable media, the atleast one computer is operative to require input of at least one manualinput that corresponds to the boot password through the at least oneinput device prior to booting responsive to a boot record associatedwith the portable bootable media, wherein when the computer does notdetect a connection of a portable bootable media, the at least onecomputer is operative to boot responsive to a boot record on thespecified default bootable media without requiring user input of theboot password.
 15. The apparatus according to claim 14, wherein the atleast one transaction function device includes a cash dispenser.
 16. Theapparatus according to claim 14, wherein the at least one transactionfunction device includes a depository mechanism.
 17. The apparatusaccording to claim 14, wherein the at least one transaction functiondevice includes a cash recycler.
 18. Apparatus comprising: an automatedbanking machine that operates responsive to data read from data bearingrecords to cause financial transfers, including: a card reader operativeto read card data on user cards corresponding to financial accounts; atleast one transaction function device that is operative to at least oneof receive and dispense at least one of cash and checks; at least oneinput device operative to receive manual user inputs; a first storagedevice including a boot record; at least one computer including a BIOS,wherein the at least one computer is in operative connection with thecard reader, the at least one transaction function device, the at leastone input device, and the first storage device, wherein the BIOSincludes a boot password, and wherein the BIOS specifies a defaultbootable media which does not require a boot password, wherein the firststorage device corresponds to the default bootable media specified inthe BIOS, wherein the at least one computer is operative to detect aconnection of a second storage device with the at least one computer,which second storage device does not correspond to the default bootablemedia, wherein when the at least one computer detects the connection ofthe second storage device, the at least one computer is operative torequire input of at least one manual input that corresponds to the bootpassword through the at least one input device prior to bootingresponsive to a boot record associated with the second storage device,wherein when the computer does not detect a connection of the secondstorage device, the at least one computer is operative to bootresponsive to the boot record on the first storage device withoutrequiring user input of the boot password.